CDD is how banks verify who you are and where your money comes from before opening an account or processing large transactions
CDD stands for Customer Due Diligence. It is the process a bank uses to collect and verify information about you when you open an account or conduct certain transactions. The bank is not being cautious for its own sake — federal law requires it. Banks must know who their customers are, where customer money originates, and whether that money is connected to illegal activity.
CDD happens in two moments: when you first open an account, and when you conduct transactions that trigger additional scrutiny. The initial CDD is straightforward — you provide your name, address, date of birth, and identification number, and the bank checks those details against government records and watchlists. The second type, called ongoing CDD, happens continuously as the bank monitors your account activity for patterns that seem unusual or suspicious.
The distinction matters because initial CDD is a one-time event you experience directly, while ongoing CDD happens in the background. You will not see ongoing CDD in action, but you may notice it if a transaction is delayed or if the bank asks you questions about a large deposit or wire transfer.
Key Takeaways
- CDD is a federal requirement that banks collect your name, address, date of birth, and identification to verify who you are before opening an account.
- Banks use CDD to check whether you appear on government watchlists or sanctions lists that would prohibit them from doing business with you.
- Ongoing CDD means banks monitor your account activity after opening to spot patterns that might indicate money laundering or other illegal activity.
- CDD is separate from KYC (Know Your Customer), though the terms are sometimes used together — KYC is broader and includes CDD as one component.
What information banks collect during initial CDD
When you open a checking or savings account, the bank will ask for your full legal name, current address, date of birth, and a government-issued ID number — usually your Social Security number in the United States. Some banks also ask for your phone number and email address, though those are not strictly required by CDD rules.
The bank then cross-checks this information against the Office of Foreign Assets Control (OFAC) sanctions list, which is a list of individuals and entities the U.S. government has prohibited from conducting financial transactions. The bank also checks you against the FinCEN (Financial Crimes Enforcement Network) database and its own internal records to see if you have been flagged for suspicious activity elsewhere.
If your information matches someone on a watchlist, or if the bank cannot verify your identity, the bank will either deny the account or ask you to provide additional documentation. This is rare for most people, but it happens more often if you have a common name, a recent address change, or if there is a data error in government records.
How ongoing CDD works after your account is open
After you open an account, the bank does not stop monitoring. Ongoing CDD means the bank watches your account for activity that deviates from your normal pattern or that matches known indicators of money laundering or fraud. A sudden large deposit followed by when ready wire transfers out of the country, for example, would trigger a closer look.
The bank uses software to flag transactions that meet certain criteria — deposits above a certain threshold, frequent international transfers, deposits from high-risk countries, or patterns that match known criminal activity. When a transaction is flagged, a compliance officer reviews it to decide whether it is legitimate or whether it warrants a report to FinCEN.
You may not know ongoing CDD is happening, but you might notice its effects. A wire transfer might be delayed by a day while the bank reviews it. The bank might call or email asking where a large deposit came from. These are signs that ongoing CDD has flagged your transaction, and the bank is doing its job to verify that the money is not connected to illegal activity.
The difference between CDD and KYC
CDD and KYC (Know Your Customer) are related but not identical. KYC is the broader umbrella — it includes everything a bank does to understand who you are and what your financial profile looks like. CDD is the specific part of KYC that focuses on verifying your identity and checking you against watchlists.
Think of it this way: KYC is the full picture of who you are as a customer. CDD is the identity verification and sanctions screening that happens first. A bank might also use KYC to understand your income level, your typical transaction patterns, and your stated purpose for the account — information that goes beyond what CDD requires.
In practice, banks often use the terms interchangeably, and many compliance departments refer to their entire customer verification process as "KYC/CDD". But if a bank specifically mentions CDD, it is talking about the identity verification and watchlist screening piece.
Why banks are required to do CDD
CDD is mandated by the Bank Secrecy Act (BSA) and the USA PATRIOT Act. These laws were written to prevent money laundering, terrorist financing, and other financial crimes. The logic is straightforward: if banks know who their customers are and monitor their activity, criminals cannot use the banking system to hide the origin of illegal money or move it across borders undetected.
Banks that fail to conduct proper CDD face significant penalties. The Office of the Comptroller of the Currency (OCC), the Federal Reserve, and the FDIC all have authority to fine banks for CDD violations. Penalties can reach millions of dollars, and in serious cases, a bank can lose its charter. This is why banks take CDD seriously and why the process can sometimes feel intrusive.
From your perspective as a customer, CDD is a cost of having a bank account. It protects the banking system from being used for crime, and it protects the bank from legal liability. It also protects you, because a bank that knows its customers is less likely to be compromised by fraud or money laundering schemes that could affect your account.
What happens if you do not pass CDD
If your information does not match government records, or if your name appears on a watchlist, the bank will typically ask you to provide additional documentation before opening an account. This might mean submitting a copy of your passport, a utility bill, or a letter from your employer confirming your identity and address.
In rare cases, a bank will deny an account outright. This usually happens if you are on an OFAC sanctions list, if you cannot verify your identity despite providing multiple documents, or if the bank suspects you are using a false identity. If this happens, you have the right to ask the bank why you were denied, and you can dispute the decision if you believe it is in error.
If you are denied by one bank, you may be able to open an account at another bank, but the denial will likely appear in banking records that other banks can see. The best approach is to contact the bank that denied you, understand the specific reason, and provide additional documentation to clear up any confusion.
CDD for business accounts and high-risk customers
CDD for business accounts is more complex than for personal accounts. Banks must verify the identity of the business owner or authorized signers, confirm the business is registered with the state, and understand the nature of the business and its expected transaction volume. For certain types of businesses — money services businesses, casinos, real estate agents — CDD is even more stringent.
Banks also explore heightened CDD to customers they consider high-risk. This includes customers from countries with weak anti-money-laundering controls, customers in certain industries like precious metals dealing, and customers with transaction patterns that suggest higher risk. Heightened CDD means the bank collects more information, conducts more thorough background checks, and monitors the account more closely.
If you operate a business or if your account has been flagged as high-risk, expect the bank to ask more questions and to take longer to process your account opening. This is normal and does not mean you have done anything wrong — it straightforward means the bank is following regulatory requirements for your customer category.
Frequently Asked Questions
Can a bank deny me an account because of CDD?
Yes, if you cannot verify your identity, if your information does not match government records, or if you appear on a sanctions list. Banks can also deny an account if they believe you are providing false information. If this happens, ask the bank for the specific reason and provide additional documentation if possible.
How long does CDD take when opening an account?
Initial CDD usually takes a few minutes to a few hours. The bank verifies your information against government databases in real time or within the same business day. If the bank needs additional documentation, the process can take several days or longer depending on how quickly you provide the documents.
Does CDD mean the bank thinks I am doing something illegal?
No. CDD is a routine requirement for every customer at every bank. It is not a sign of suspicion — it is a legal requirement. Banks must conduct CDD on all customers regardless of whether they have any reason to suspect illegal activity.
Will CDD affect my credit score?
No. CDD involves identity verification and watchlist screening, not a credit check. The bank may run a credit check as part of opening an account, but that is separate from CDD and is your choice to allow or decline.
What if I disagree with information the bank found during CDD?
Contact the bank's compliance department and provide documentation that corrects the error. If the issue is with government records — for example, an incorrect address in the Social Security Administration database — you will need to correct those records directly with the government agency, and then provide the bank with proof of the correction.